$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft File: h81xgndjHgvdtrTzot8esxEio4E.mft (raw, json) Hash identifier: Ptd2MwpQa6fF2sW0T0dowXG3AT/uXapF2vnIt7kyqCU= Subject key identifier: 4F:13:E3:03:61:14:43:DE:D2:AE:61:D7:97:7F:20:7E:47:41:5E:F9 Authority key identifier: 87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81 Certificate issuer: /CN=A91F2DDD/serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381 Certificate serial: 0E7D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft Manifest number: 11AE Signing time: Fri 22 Aug 2025 17:49:47 +0000 Manifest this update: Fri 22 Aug 2025 17:49:47 +0000 Manifest next update: Fri 29 Aug 2025 17:49:47 +0000 Files and hashes: 1: h81xgndjHgvdtrTzot8esxEio4E.crl (hash: uKFEledWBPx1Tx2m1wFoBfIk/oHxQmAoJAk0qVk7kGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3709 (0xe7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2DDD, serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381 Validity Not Before: Aug 22 17:49:47 2025 GMT Not After : Aug 29 17:49:47 2025 GMT Subject: CN=68a8adbb-000b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5d:79:53:9a:0f:3b:3a:f1:42:9e:79:c6:f1: bb:90:8e:43:c0:39:a1:8a:20:be:9c:cc:64:32:f0: 17:01:4e:45:03:90:dd:e4:32:71:a1:74:94:4f:4a: c7:c6:30:ac:ce:bd:1b:26:96:44:90:34:aa:b5:01: 02:73:75:e6:56:17:f4:6c:e2:ee:f5:51:57:a9:6e: da:d3:fd:13:4a:66:ba:00:a5:0a:f7:24:aa:70:4a: d1:25:16:c5:f9:09:e2:80:cc:09:a9:62:d1:72:48: ca:e1:cc:93:1d:7d:ae:d5:81:20:95:33:6f:dd:04: 66:8b:b7:ce:47:63:b0:34:9e:af:a4:0f:bd:59:48: 23:8d:7d:3e:9a:84:41:ae:91:21:d4:ea:ce:25:2c: b7:44:38:08:5e:a3:1e:44:11:dd:20:82:ca:fc:1b: 05:54:d9:fe:21:35:1b:89:ca:7d:8f:2d:36:cb:16: 41:f4:2a:7d:50:92:13:f4:16:50:8c:cf:7f:23:0b: 27:bd:f5:14:5f:57:bf:c9:d5:6c:20:51:a7:c1:9e: c8:2c:d0:1f:d0:f0:65:89:96:bb:e3:01:39:d7:8d: ce:c0:44:44:a1:35:5c:2c:22:a5:27:ea:9b:2c:63: ae:2a:a7:71:dd:8d:55:fa:54:c9:1d:b7:ca:a3:cc: 4e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:13:E3:03:61:14:43:DE:D2:AE:61:D7:97:7F:20:7E:47:41:5E:F9 X509v3 Authority Key Identifier: keyid:87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7e:44:d8:a7:a9:48:99:48:46:a1:cf:df:d1:a2:63:a6:1b: 9f:56:ec:70:3d:22:ec:59:13:2d:2a:97:7b:5d:28:a1:87:8a: 43:2c:55:3a:83:b1:a3:75:71:4e:44:b3:2d:ec:7d:e9:4b:68: c3:8f:d8:72:f0:01:6c:35:97:83:a4:98:64:40:e7:88:ee:17: 2e:cd:11:00:18:b6:65:b9:a7:4e:79:e9:64:7c:f7:9c:33:ad: 44:20:86:24:6a:fb:cc:5d:23:71:5e:a6:fe:0d:5b:eb:d2:af: 00:05:97:7f:bb:53:7d:bb:d0:b3:bf:5f:5e:79:e2:de:aa:1d: de:e7:d4:31:2e:83:a7:26:ec:07:5f:60:fe:ed:fc:92:ba:1b: 38:2b:31:38:07:3a:0b:19:29:77:a4:25:e3:92:75:f0:68:84: 4a:6a:88:9b:d2:d4:ef:c9:f7:ec:2f:da:54:cd:99:f8:51:71: 92:40:3c:b0:29:46:db:40:22:c4:e8:bb:ef:e8:9b:46:99:ac: 56:54:8e:ae:ac:32:01:8d:eb:59:31:19:51:78:ca:7d:7a:97: 4d:3c:22:bd:40:8e:e3:80:91:d6:5e:8e:45:4c:bd:60:93:5a: 33:77:0e:4d:5d:ca:bc:23:64:4a:de:94:89:3b:2a:92:fb:05: 01:e8:ea:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJEREQxMTAvBgNVBAUTKDg3Q0Q3MTgyNzc2MzFFMEJEREI2QjRGM0EyREYxRUIz MTEyMkEzODEwHhcNMjUwODIyMTc0OTQ3WhcNMjUwODI5MTc0OTQ3WjAYMRYwFAYD VQQDEw02OGE4YWRiYi0wMDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs115U5oPOzrxQp55xvG7kI5DwDmhiiC+nMxkMvAXAU5FA5Dd5DJxoXSUT0rH xjCszr0bJpZEkDSqtQECc3XmVhf0bOLu9VFXqW7a0/0TSma6AKUK9ySqcErRJRbF +QnigMwJqWLRckjK4cyTHX2u1YEglTNv3QRmi7fOR2OwNJ6vpA+9WUgjjX0+moRB rpEh1OrOJSy3RDgIXqMeRBHdIILK/BsFVNn+ITUbicp9jy02yxZB9Cp9UJIT9BZQ jM9/IwsnvfUUX1e/ydVsIFGnwZ7ILNAf0PBliZa74wE5143OwEREoTVcLCKlJ+qb LGOuKqdx3Y1V+lTJHbfKo8xOlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8T4wNh FEPe0q5h15d/IH5HQV75MB8GA1UdIwQYMBaAFIfNcYJ3Yx4L3ba086LfHrMRIqOB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkRERC9CNEEyODM2MjlF MUIxMUU5OEUxRTRFNUVDNEY5QUUwMi9oODF4Z25kakhndmR0clR6b3Q4ZXN4RWlv NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g4MXhnbmRqSGd2ZHRyVHpvdDhlc3hFaW80RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkRERC9CNEEyODM2MjlFMUIxMUU5OEUxRTRFNUVDNEY5QUUwMi9oODF4Z25kakhn dmR0clR6b3Q4ZXN4RWlvNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAafkTYp6lImUhGoc/f0aJjphufVuxwPSLsWRMtKpd7XSihh4pDLFU6 g7GjdXFORLMt7H3pS2jDj9hy8AFsNZeDpJhkQOeI7hcuzREAGLZluadOeelkfPec M61EIIYkavvMXSNxXqb+DVvr0q8ABZd/u1N9u9Czv19eeeLeqh3e59QxLoOnJuwH X2D+7fySuhs4KzE4BzoLGSl3pCXjknXwaIRKaoib0tTvyffsL9pUzZn4UXGSQDyw KUbbQCLE6Lvv6JtGmaxWVI6urDIBjetZMRlReMp9epdNPCK9QI7jgJHWXo5FTL1g k1ozdw5NXcq8I2RK3pSJOyqS+wUB6Ore -----END CERTIFICATE-----Generated at Sat Aug 23 20:28:42 2025 by rpki-client